Repro build cleanup

[dmonakhov]

Here are trivial cleanups for reproducible build, Commits are tiny so feel free to squash it in to one if required.

TOC

Trivial cleanup for reproducible build examples

• README: Update examples to use latest's release
• README: fix repro build example

Improve check repro human readability

• check-repro: dump published resource checksum

IMHO with explicit csum logging verification becomes more intuitive , see:

Comparing against: /tmp/checkout/firmware/releases/2026-07-01T1727-v1.4.1Q-q1-coldcard.dfu
SHA256: 1139f2192602711ca182cec0e40f825365f4f617dd672eb452a2aa07d3af95e7 /tmp/checkout/firmware/releases/2026-07-01T1727-v1.4.1Q-q1-coldcard.dfu
test -n "/tmp/checkout/firmware/releases/2026-07-01T1727-v1.4.1Q-q1-coldcard.dfu" -a -f /tmp/checkout/firmware/releases/2026-07-01T1727-v1.4.1Q-q1-coldcard.dfu
rm -f -f check-fw.bin check-bootrom.bin
signit split /tmp/checkout/firmware/releases/2026-07-01T1727-v1.4.1Q-q1-coldcard.dfu check-fw.bin check-bootrom.bin
start 293 for 1073152 bytes: Firmware => check-fw.bin
signit check check-fw.bin
     magic_value: 0xcc001234
       timestamp: 2026-07-01 17:28:10 UTC
  version_string: 1.4.1Q
      pubkey_num: 1
 firmware_length: 1073152
   install_flags: 0x0 =>
       hw_compat: 0x10 => Q1
         best_ts: b'\x00\x00\x00\x00\x00\x00\x00\x00'
          future: 0000000000000000 ... 0000000000000000
       signature: be7583eeef90b112 ... d840ffb353891968
sha256^2: 6a7f10b28faacbc319b9b632e1d4978664164a6ec58520ec6f12cba563a9b818

[scgbckbone]

this also should not be needed

[dmonakhov]

It worked for 2026-03-05T2052-v5.5.0, but commit a4ae6c8 has changed submods-match, which was broken and was simply noop.

Just try it yourself

git clone https://github.com/Coldcard/firmware.git
cd firmware
# DOWNLOAD https://coldcard.com/downloads                                                                                                                                                                                                     
# get a copy of binary into ./releases/2026-03-05T2052-v5.5.0-mk-coldcard.dfu                                                                                                                                                                 
git checkout 2026-07-01T1730-v5.5.1
cd stm32
make -f MK-Makefile repro

And it fails like this:

...
HEAD is now at ae885935 New release: 2026-07-01T1730-v5.5.1
Checking submodule revisions: external/micropython external/ckcc-protocol external/mpy-qr external/libngu misc/gpu/external/stm32c0xx_hal_driver misc/gpu/external/cmsis_device_c0
-3d1dfa858beb58b8dac37d8c66d7aed2909812f2 ../external/ckcc-protocol
-537519a829259622ea6b0334fbafd6cae852852f ../external/libngu
-4107246f8a080807b62c3b4838e71e812ea68b6f ../external/micropython
-11347d83f4eb325b10676a4eb8e17deccfe0df44 ../external/mpy-qr
-7e32bf9d8117ee4c8f6a1d138b814fc24bf4c906 ../misc/gpu/external/cmsis_device_c0
-4c5e3e45a8478a33decb1f45d663f485f89c459b ../misc/gpu/external/stm32c0xx_hal_driver
make: *** [shared.mk:180: submods-match] Error 1